Information Security Management System (ISMS) Manager

JOB DESCRIPTION FORM

Position Vacant

Information Security Management System (ISMS) Manager

Company Profile

AVANTEL LIMITED is a technology driven public limited company with a focus on developing innovative wireless communication products and solutions to meet unique requirements of defense, railways, and telecom sectors. The organization is certified against AS 9100D and ISO 9001:2015 standards for Quality Management System. For more details visit www.avantel.in.

Education

1. B.Tech / B.E (IT, CSE) or a related field.
2. Certifications (e.g., CISA, CISSP, ISO 27001 Lead Auditor) are often preferred

Required Skill Set
(Mandatory)

1. Conduct Audits: Perform regular audits of the organization's Information Security Management System (ISMS) to assess its effectiveness and compliance with relevant standards (e.g., ISO/IEC 27001).
2. Documentation Review: Evaluate and review documentation related to information security policies, procedures, guidelines, and controls to ensure they align with established standards and best practices.
3. Risk Assessment: Identify and assess potential information security risks within the organization, considering the confidentiality, integrity, and availability of information assets.
4. Compliance Verification: Verify that the organization adheres to applicable laws, regulations, and contractual requirements related to information security.
5. Audit Planning: Plan and organize audit activities, including defining audit scope, objectives, and criteria. Develop audit plans and schedules to ensure effective and efficient evaluations.
6. Communication: Communicate audit findings, risks, and recommendations to key stakeholders, including management and relevant departments. Prepare detailed audit reports summarizing assessment results.
7. Continuous Improvement: Collaborate with internal teams to recommend and implement improvements to information security processes, policies, and controls based on audit findings.
8. Training and Awareness: Provide training and awareness programs to educate employees on information security best practices and policies.
9. Stay Informed: Continuously informed of the latest developments in information security, regulatory requirements, and industry best practices to ensure the ISMS remains current and effective.

Experience

5 to 10 years

Compensation

18 to 24 LPA

Location of posting

Hyderabad


Looking for Ideal Candidate with:

• Proven experience in ISO27001 documentation/ Implementation / Maintenance/Audit skills.
• Experience : 1- 5 years
• ISMS activities :

1. Asset management
2. Risk management.
3. Identity & Access Management
4. Incident management
5. Change management.
6. Capacity management
7. Configuration management
8. Patch management.
9. Privilege access management.
10. Security event management.
11. BCP/DR
12. Backup & Restoration
13. Encryption of servers and desktop/laptops
14. Vulnerability Assessment
15. Penetration testing
16. VLAN implementation
17. Cryptographic key management
18. Manage Technical vulnerabilities.
19. Compliance Management
20. Monitoring & reporting